$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa File: 4af9227c-5b03-3294-9ff8-b4e25c39e237.roa (raw, json) Hash identifier: FpfGuZX9AgMhzPV72Ssgq2BH9ie6KD71uR8ou4IQq2Q= Subject key identifier: 4C:53:14:CA:65:84:0F:C6:CA:36:C1:FE:E8:66:BC:1A:8B:44:28:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D84343F9B9A19C727546C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 397205 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:34:3f:9b:9a:19:c7:27:54:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=6c780f15-02e6-4cb1-a389-bf7d8ca1c190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:d4:6c:d6:9e:d8:c5:7a:0a:1d:8a:5a:8a: 20:de:90:ab:6f:5a:da:56:d9:04:e3:42:e7:b4:27: 6f:4a:d7:b9:84:5c:99:41:9c:c3:77:39:f5:e8:bd: 0a:24:4d:8d:0f:9a:ce:1d:80:de:9a:91:08:52:d1: 93:c7:a1:53:31:e9:b8:f4:b1:63:28:6a:f6:9b:58: 1c:29:99:8e:a6:67:09:9c:68:2c:1a:33:1d:e4:56: ab:1e:c0:9e:d8:c5:dc:c4:75:76:8b:fc:d9:1c:78: a0:2f:b3:cc:60:3f:fc:4b:a9:d5:26:0d:b6:ff:62: 60:89:a6:b7:1a:eb:79:9c:7f:c8:a4:f7:6c:c9:91: e7:c4:ad:a2:d9:0c:ac:e0:fc:37:cb:66:74:06:44: fa:b4:12:22:53:4b:29:82:bf:87:48:0f:86:74:b9: 2a:c7:06:d0:6f:ba:77:b8:ed:c8:fa:c2:8d:db:65: 40:a3:65:80:bd:a8:b3:0f:88:1e:d3:26:93:72:cd: cf:d6:ce:ef:9c:22:d8:e4:66:c6:9d:9c:06:41:64: 62:10:e8:37:d5:59:ef:66:4b:60:5f:85:40:59:a8: de:5d:36:52:f5:6d:6d:92:9c:83:27:8c:de:81:5c: f0:06:da:0b:41:5f:05:f3:0a:10:b3:e1:8c:fe:85: a7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:14:CA:65:84:0F:C6:CA:36:C1:FE:E8:66:BC:1A:8B:44:28:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b2:00:c6:b4:da:95:7b:dd:55:f7:2c:66:f7:ea:c0:7f:60: 96:db:bc:d7:fa:61:36:bc:e6:0c:4f:91:27:87:e3:27:17:dd: 12:00:43:c4:98:3a:e1:6b:97:77:08:76:13:7b:42:fe:78:95: 33:28:31:9e:b0:43:1c:b0:9d:de:8c:1a:e3:41:d7:6c:87:8a: 9d:16:92:6e:b1:f2:7b:23:9b:c3:b6:c2:c1:dd:26:72:b8:e0: 61:c3:66:b7:b0:0e:c2:7e:14:37:7a:8e:69:b8:23:42:43:82: 25:77:16:13:b0:4e:0f:e3:14:66:3e:04:73:1b:c0:50:21:5e: e1:d3:f8:77:1b:ce:4e:02:a4:c3:25:24:c4:4a:1f:d9:d1:db: f5:53:2c:74:9d:0d:14:85:81:f2:80:7f:db:cb:83:04:87:14: 3c:00:0f:02:c4:e8:5e:e5:fc:f8:42:f6:18:2c:f5:c6:da:8f: 4c:b4:0a:cc:98:c6:b5:6f:2d:2d:f6:fd:55:49:95:d2:05:e6: 65:4b:5c:8e:58:6b:d4:b9:04:cf:dd:0c:89:39:46:08:c9:2c: b1:de:50:62:e3:26:f6:ff:b1:d0:22:a5:b0:dd:2b:6e:4f:6f: 17:23:26:7a:01:42:6e:11:fd:bc:c6:4e:a0:39:c3:5f:8a:af: 5a:8f:59:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDQ/m5oZxydUbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NmM3ODBmMTUtMDJlNi00Y2IxLWEzODktYmY3ZDhjYTFjMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSvUbNae2MV6Ch2KWoog3pCrb1raVtkE40Ln tCdvSte5hFyZQZzDdzn16L0KJE2ND5rOHYDempEIUtGTx6FTMem49LFjKGr2m1gc KZmOpmcJnGgsGjMd5FarHsCe2MXcxHV2i/zZHHigL7PMYD/8S6nVJg22/2Jgiaa3 Gut5nH/IpPdsyZHnxK2i2Qys4Pw3y2Z0BkT6tBIiU0spgr+HSA+GdLkqxwbQb7p3 uO3I+sKN22VAo2WAvaizD4ge0yaTcs3P1s7vnCLY5GbGnZwGQWRiEOg31VnvZktg X4VAWajeXTZS9W1tkpyDJ4zegVzwBtoLQV8F8woQs+GM/oWnTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFExTFMplhA/GyjbB/uhmvBqLRCh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFmOTIyN2MtNWIwMy0z Mjk0LTlmZjgtYjRlMjVjMzllMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHsgDGtNqVe91V9yxm9+rAf2CW27zX+mE2vOYMT5Enh+MnF90SAEPE mDrha5d3CHYTe0L+eJUzKDGesEMcsJ3ejBrjQddsh4qdFpJusfJ7I5vDtsLB3SZy uOBhw2a3sA7CfhQ3eo5puCNCQ4IldxYTsE4P4xRmPgRzG8BQIV7h0/h3G85OAqTD JSTESh/Z0dv1Uyx0nQ0UhYHygH/by4MEhxQ8AA8CxOhe5fz4QvYYLPXG2o9MtArM mMa1by0t9v1VSZXSBeZlS1yOWGvUuQTP3QyJOUYIySyx3lBi4yb2/7HQIqWw3Stu T28XIyZ6AUJuEf28xk6gOcNfiq9aj1mc -----END CERTIFICATE-----Generated at Sat Jun 13 13:25:39 2026 by rpki-client